home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2010-08-26 | 8.0 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 90 90 90 90 90 8b ff 55 | 8b ec a1 b4 3a 02 00 85 |.......U|....:...|
|00000010| c0 b9 40 bb 00 00 74 04 | 3b c1 75 20 8b 15 5c 1a |..@...t.|;.u ..\.|
|00000020| 02 00 b8 b4 3a 02 00 c1 | e8 08 33 02 25 ff ff 00 |....:...|..3.%...|
|00000030| 00 a3 b4 3a 02 00 0f 84 | 1c 04 00 00 f7 d0 a3 b0 |...:....|........|
|00000040| 3a 02 00 5d 90 90 90 90 | 90 8b ff 55 8b ec 53 56 |:..]....|...U..SV|
|00000050| 57 ff 35 0c 38 02 00 be | a0 52 02 00 56 ff 15 8c |W.5.8...|.R..V...|
|00000060| 1d 02 00 68 10 3d 02 00 | 33 db 53 53 6a 12 56 8b |...h.=..|3.SSj.V.|
|00000070| 75 08 6a 28 56 ff 15 40 | 1b 02 00 8b f8 3b fb 89 |u.j(V..@|.....;..|
|00000080| 7d 08 0f 8c 28 03 00 00 | 6a 1c 59 b8 2f 5a 02 00 |}...(...|j.Y./Z..|
|00000090| c7 46 34 7a 73 04 00 8d | 7e 38 f3 ab e8 49 00 00 |.F4zs...|~8...I..|
|000000a0| 00 8b 75 0c 66 8b 06 66 | 83 c0 02 66 a3 9a 52 02 |..u.f..f|...f..R.|
|000000b0| 00 0f b7 c0 68 49 66 73 | 20 50 6a 01 ff 15 60 1d |....hIfs| Pj...`.|
|000000c0| 02 00 3b c3 a3 9c 52 02 | 00 0f 84 2d 03 00 00 56 |..;...R.|...-...V|
|000000d0| 68 98 52 02 00 ff 15 94 | 1a 02 00 8b 45 08 5f 5e |h.R.....|....E._^|
|000000e0| 5b 5d c2 08 00 90 90 90 | 90 90 8b ff 55 8b ec 83 |[]......|....U...|
|000000f0| ec 10 53 56 57 6a 28 59 | 33 c0 bf d0 48 02 00 c6 |..SVWj(Y|3...H...|
|00000100| 05 16 3d 02 00 01 f3 ab | ff 15 a4 1a 02 00 8b 35 |..=.....|.......5|
|00000110| cc 1a 02 00 a3 18 3d 02 | 00 a1 08 1d 02 00 0f be |......=.|........|
|00000120| 00 33 db 53 6a 01 68 24 | 3d 02 00 a3 14 3f 02 00 |.3.Sj.h$|=....?..|
|00000130| ff d6 53 6a 01 68 28 4b | 02 00 ff d6 8b 3d d0 1b |..Sj.h(K|.....=..|
|00000140| 02 00 68 54 3d 02 00 ff | d7 68 f4 3d 02 00 ff d7 |..hT=...|.h.=....|
|00000150| 8b 35 54 1d 02 00 68 34 | 3e 02 00 ff d6 68 6c 3e |.5T...h4|>....hl>|
|00000160| 02 00 ff d6 68 a4 3e 02 | 00 ff d6 c7 45 fc 40 4f |....h.>.|....E.@O|
|00000170| 02 00 c7 45 f8 0a 00 00 | 00 ff 75 fc ff d6 83 45 |...E....|..u....E|
|00000180| fc 38 ff 4d f8 75 f2 68 | dc 3e 02 00 ff d6 68 58 |.8.M.u.h|.>....hX|
|00000190| 4b 02 00 ff d6 68 c0 49 | 02 00 ff d6 b8 74 41 02 |K....h.I|.....tA.|
|000001a0| 00 a3 78 41 02 00 a3 74 | 41 02 00 b8 7c 41 02 00 |..xA...t|A...|A..|
|000001b0| a3 80 41 02 00 a3 7c 41 | 02 00 b8 90 41 02 00 a3 |..A...|A|....A...|
|000001c0| 94 41 02 00 a3 90 41 02 | 00 89 1d 88 41 02 00 89 |.A....A.|....A...|
|000001d0| 1d 8c 41 02 00 89 1d 38 | 4c 02 00 89 1d 3c 4c 02 |..A....8|L....<L.|
|000001e0| 00 c7 05 a8 41 02 00 79 | 26 01 00 89 1d ac 41 02 |....A..y|&.....A.|
|000001f0| 00 89 1d a0 41 02 00 33 | c9 b8 f8 41 02 00 c7 45 |....A..3|...A...E|
|00000200| f8 83 00 00 00 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000210| 8b d1 6b d2 38 81 c2 40 | 4f 02 00 41 83 f9 0a 89 |..k.8..@|O..A....|
|00000220| 40 04 89 00 89 50 08 0f | 84 7c 01 00 00 83 c0 0c |@....P..|.|......|
|00000230| ff 4d f8 75 db 6a 11 b8 | 20 48 02 00 59 89 40 04 |.M.u.j..| H..Y.@.|
|00000240| 89 00 83 c0 08 49 75 f5 | 68 68 4a 02 00 ff d6 68 |.....Iu.|hhJ....h|
|00000250| 00 4c 02 00 88 1d bc 4a | 02 00 88 1d dc 4a 02 00 |.L.....J|.....J..|
|00000260| 88 1d fc 4a 02 00 88 1d | 1c 4b 02 00 ff d6 ff 35 |...J....|.K.....5|
|00000270| f8 37 02 00 b8 50 4b 02 | 00 a3 54 4b 02 00 a3 50 |.7...PK.|..TK...P|
|00000280| 4b 02 00 b8 90 4b 02 00 | a3 94 4b 02 00 a3 90 4b |K....K..|..K....K|
|00000290| 02 00 8d 45 f0 50 c7 05 | 9c 4b 02 00 02 00 00 00 |...E.P..|.K......|
|000002a0| 88 1d a0 4b 02 00 88 1d | a1 4b 02 00 ff 15 64 1c |...K....|.K....d.|
|000002b0| 02 00 6a 01 8d 45 f0 50 | 68 b8 48 02 00 ff 15 7c |..j..E.P|h.H....||
|000002c0| 1d 02 00 ff 35 ec 37 02 | 00 8b 35 8c 1d 02 00 68 |....5.7.|..5....h|
|000002d0| c0 48 02 00 ff d6 ff 35 | f0 37 02 00 68 c8 48 02 |.H.....5|.7..h.H.|
|000002e0| 00 ff d6 ff 35 94 3a 02 | 00 68 8c 49 02 00 ff d6 |....5.:.|.h.I....|
|000002f0| ff 35 98 3a 02 00 68 94 | 49 02 00 ff 15 d4 1c 02 |.5.:..h.|I.......|
|00000300| 00 68 30 00 df ff 68 9c | 49 02 00 ff d6 c7 05 b0 |.h0...h.|I.......|
|00000310| 4b 02 00 b9 0b 00 00 c7 | 05 c0 4b 02 00 ba 0b 00 |K.......|..K.....|
|00000320| 00 c7 45 fc 10 4a 02 00 | ff 34 9d 40 3a 02 00 ff |..E..J..|.4.@:...|
|00000330| 75 fc ff d6 83 45 fc 08 | 43 83 fb 07 76 ea 6a 0b |u....E..|C...v.j.|
|00000340| 59 3b d9 73 1c 2b cb 8d | 3c dd 10 4a 02 00 d1 e1 |Y;.s.+..|<..J....|
|00000350| 8d 77 f8 81 e1 fe ff ff | 3f f3 a5 8b 3d d0 1b 02 |.w......|?...=...|
|00000360| 00 68 14 3e 02 00 ff d7 | 6a 04 be 74 3d 02 00 5b |.h.>....|j..t=..[|
|00000370| 56 ff d7 83 c6 20 4b 75 | f7 ff 15 04 1d 02 00 83 |V.... Ku|........|
|00000380| f8 08 5f 5e 5b 0f 82 c5 | 00 00 00 48 a3 34 3d 02 |.._^[...|...H.4=.|
|00000390| 00 ff 15 68 1b 02 00 8b | c8 b8 80 f0 fa 02 33 d2 |...h....|......3.|
|000003a0| f7 f1 a3 44 4c 02 00 c9 | c3 33 c9 e9 7d fe ff ff |...DL...|.3..}...|
|000003b0| 83 3d cc 3a 02 00 02 72 | 2c f6 05 d0 3a 02 00 01 |.=.:...r|,...:...|
|000003c0| 74 23 ff 15 10 1a 02 00 | 3c 02 73 19 53 57 68 10 |t#......|<.s.SWh.|
|000003d0| 0e 06 00 e8 f6 01 fc ff | 68 48 0e 06 00 e8 ec 01 |........|hH......|
|000003e0| fc ff 83 c4 10 53 53 53 | 53 57 68 d2 07 00 c0 56 |.....SSS|SWh....V|
|000003f0| e8 2b b7 fb ff 8b c7 e9 | e2 fc ff ff 66 89 1d 9a |.+......|....f...|
|00000400| 52 02 00 66 89 1d 98 52 | 02 00 e9 cc fc ff ff 90 |R..f...R|........|
|00000410| 53 72 76 46 73 64 49 6e | 69 74 69 61 6c 69 7a 65 |SrvFsdIn|itialize|
|00000420| 3a 20 55 6e 61 62 6c 65 | 20 74 6f 20 63 72 65 61 |: Unable| to crea|
|00000430| 74 65 20 64 65 76 69 63 | 65 20 6f 62 6a 65 63 74 |te devic|e object|
|00000440| 3a 20 25 58 00 00 00 00 | 0a 00 cc cc cc cc cc cc |: %X....|........|
|00000450| 6a 08 58 e9 33 ff ff ff | 8b c1 a3 b4 3a 02 00 e9 |j.X.3...|....:...|
|00000460| d8 fb ff ff 14 0f 05 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| dc 0e 05 00 00 1a 01 00 | 2c 0f 05 00 00 00 00 00 |........|,.......|
|00000480| 00 00 00 00 e4 0e 05 00 | 18 1a 01 00 58 0f 05 00 |........|....X...|
|00000490| 00 00 00 00 00 00 00 00 | f0 0e 05 00 44 1a 01 00 |........|....D...|
|000004a0| 0c 13 05 00 00 00 00 00 | 00 00 00 00 fe 0e 05 00 |........|........|
|000004b0| f8 1d 01 00 24 13 05 00 | 00 00 00 00 00 00 00 00 |....$...|........|
|000004c0| 06 0f 05 00 10 1e 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 48 41 4c 2e |........|....HAL.|
|000004e0| 64 6c 6c 00 6b 73 65 63 | 64 64 2e 73 79 73 00 00 |dll.ksec|dd.sys..|
|000004f0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 54 44 |ntoskrnl|.exe..TD|
|00000500| 49 2e 53 59 53 00 57 4d | 49 4c 49 42 2e 53 59 53 |I.SYS.WM|ILIB.SYS|
|00000510| 00 00 90 90 30 13 05 00 | 44 13 05 00 58 13 05 00 |....0...|D...X...|
|00000520| 66 13 05 00 74 13 05 00 | 00 00 00 00 88 13 05 00 |f...t...|........|
|00000530| a2 13 05 00 b6 13 05 00 | ca 13 05 00 e8 13 05 00 |........|........|
|00000540| 00 14 05 00 1c 14 05 00 | 2e 14 05 00 46 14 05 00 |........|....F...|
|00000550| 60 14 05 00 00 00 00 00 | 76 14 05 00 8e 14 05 00 |`.......|v.......|
|00000560| a6 14 05 00 c8 14 05 00 | e8 14 05 00 02 15 05 00 |........|........|
|00000570| 1a 15 05 00 28 15 05 00 | 40 15 05 00 5e 15 05 00 |....(...|@...^...|
|00000580| 80 15 05 00 a0 15 05 00 | be 15 05 00 dc 15 05 00 |........|........|
|00000590| fa 15 05 00 18 16 05 00 | 2e 16 05 00 3c 16 05 00 |........|....<...|
|000005a0| 58 16 05 00 64 16 05 00 | 7c 16 05 00 94 16 05 00 |X...d...||.......|
|000005b0| a8 16 05 00 c2 16 05 00 | da 16 05 00 f0 16 05 00 |........|........|
|000005c0| fa 16 05 00 0c 17 05 00 | 18 17 05 00 24 17 05 00 |........|....$...|
|000005d0| 32 17 05 00 4c 17 05 00 | 6a 17 05 00 8a 17 05 00 |2...L...|j.......|
|000005e0| 9e 17 05 00 b2 17 05 00 | ca 17 05 00 de 17 05 00 |........|........|
|000005f0| ee 17 05 00 fc 17 05 00 | 0c 18 05 00 26 18 05 00 |........|....&...|
|00000600| 38 18 05 00 54 18 05 00 | 66 18 05 00 76 18 05 00 |8...T...|f...v...|
|00000610| 84 18 05 00 92 18 05 00 | aa 18 05 00 c6 18 05 00 |........|........|
|00000620| e2 18 05 00 f2 18 05 00 | fc 18 05 00 0c 19 05 00 |........|........|
|00000630| 24 19 05 00 3e 19 05 00 | 5a 19 05 00 6c 19 05 00 |$...>...|Z...l...|
|00000640| 7e 19 05 00 94 19 05 00 | ac 19 05 00 c4 19 05 00 |~.......|........|
|00000650| d8 19 05 00 e8 19 05 00 | fa 19 05 00 08 1a 05 00 |........|........|
|00000660| 1a 1a 05 00 30 1a 05 00 | 42 1a 05 00 58 1a 05 00 |....0...|B...X...|
|00000670| 6c 1a 05 00 8c 1a 05 00 | 9c 1a 05 00 b8 1a 05 00 |l.......|........|
|00000680| d0 1a 05 00 e4 1a 05 00 | ee 1a 05 00 08 1b 05 00 |........|........|
|00000690| 14 1b 05 00 20 1b 05 00 | 34 1b 05 00 44 1b 05 00 |.... ...|4...D...|
|000006a0| 5a 1b 05 00 6e 1b 05 00 | 78 1b 05 00 88 1b 05 00 |Z...n...|x.......|
|000006b0| 94 1b 05 00 ae 1b 05 00 | cc 1b 05 00 ec 1b 05 00 |........|........|
|000006c0| 0c 1c 05 00 1e 1c 05 00 | 38 1c 05 00 50 1c 05 00 |........|8...P...|
|000006d0| 70 1c 05 00 90 1c 05 00 | aa 1c 05 00 ba 1c 05 00 |p.......|........|
|000006e0| ca 1c 05 00 e0 1c 05 00 | f8 1c 05 00 10 1d 05 00 |........|........|
|000006f0| 2e 1d 05 00 42 1d 05 00 | 54 1d 05 00 64 1d 05 00 |....B...|T...d...|
|00000700| 7a 1d 05 00 94 1d 05 00 | aa 1d 05 00 b4 1d 05 00 |z.......|........|
|00000710| c4 1d 05 00 e0 1d 05 00 | 00 1e 05 00 16 1e 05 00 |........|........|
|00000720| 26 1e 05 00 3a 1e 05 00 | 50 1e 05 00 60 1e 05 00 |&...:...|P...`...|
|00000730| 7c 1e 05 00 8e 1e 05 00 | 9e 1e 05 00 b6 1e 05 00 ||.......|........|
|00000740| ce 1e 05 00 de 1e 05 00 | f8 1e 05 00 14 1f 05 00 |........|........|
|00000750| 2c 1f 05 00 48 1f 05 00 | 62 1f 05 00 7c 1f 05 00 |,...H...|b...|...|
|00000760| 8e 1f 05 00 b0 1f 05 00 | ca 1f 05 00 e4 1f 05 00 |........|........|
|00000770| fe 1f 05 00 1c 20 05 00 | 2a 20 05 00 3a 20 05 00 |..... ..|* ..: ..|
|00000780| 52 20 05 00 6a 20 05 00 | 80 20 05 00 98 20 05 00 |R ..j ..|. ... ..|
|00000790| ac 20 05 00 b6 20 05 00 | d0 20 05 00 de 20 05 00 |. ... ..|. ... ..|
|000007a0| fa 20 05 00 04 21 05 00 | 10 21 05 00 30 21 05 00 |. ...!..|.!..0!..|
|000007b0| 4c 21 05 00 6e 21 05 00 | 92 21 05 00 a6 21 05 00 |L!..n!..|.!...!..|
|000007c0| ca 21 05 00 e8 21 05 00 | f2 21 05 00 08 22 05 00 |.!...!..|.!..."..|
|000007d0| 2e 22 05 00 46 22 05 00 | 64 22 05 00 80 22 05 00 |."..F"..|d"..."..|
|000007e0| 94 22 05 00 a2 22 05 00 | ac 22 05 00 c0 22 05 00 |."..."..|."..."..|
|000007f0| d6 22 05 00 f0 22 05 00 | 06 23 05 00 1a 23 05 00 |."..."..|.#...#..|
|00000800| 34 23 05 00 46 23 05 00 | 58 23 05 00 76 23 05 00 |4#..F#..|X#..v#..|
|00000810| 8a 23 05 00 9e 23 05 00 | b0 23 05 00 d6 23 05 00 |.#...#..|.#...#..|
|00000820| ec 23 05 00 fa 23 05 00 | 04 24 05 00 20 24 05 00 |.#...#..|.$.. $..|
|00000830| 3e 24 05 00 56 24 05 00 | 6c 24 05 00 84 24 05 00 |>$..V$..|l$...$..|
|00000840| 9c 24 05 00 b8 24 05 00 | d2 24 05 00 ec 24 05 00 |.$...$..|.$...$..|
|00000850| fc 24 05 00 0e 25 05 00 | 20 25 05 00 2e 25 05 00 |.$...%..| %...%..|
|00000860| 3e 25 05 00 4e 25 05 00 | 60 25 05 00 7c 25 05 00 |>%..N%..|`%..|%..|
|00000870| 98 25 05 00 b0 25 05 00 | c8 25 05 00 d4 25 05 00 |.%...%..|.%...%..|
|00000880| e8 25 05 00 02 26 05 00 | 16 26 05 00 2a 26 05 00 |.%...&..|.&..*&..|
|00000890| 4a 26 05 00 6a 26 05 00 | 84 26 05 00 9a 26 05 00 |J&..j&..|.&...&..|
|000008a0| b4 26 05 00 cc 26 05 00 | e6 26 05 00 fe 26 05 00 |.&...&..|.&...&..|
|000008b0| 16 27 05 00 36 27 05 00 | 50 27 05 00 6a 27 05 00 |.'..6'..|P'..j'..|
|000008c0| 7a 27 05 00 94 27 05 00 | 9e 27 05 00 b2 27 05 00 |z'...'..|.'...'..|
|000008d0| c4 27 05 00 d2 27 05 00 | ea 27 05 00 fa 27 05 00 |.'...'..|.'...'..|
|000008e0| 16 28 05 00 2e 28 05 00 | 3e 28 05 00 54 28 05 00 |.(...(..|>(..T(..|
|000008f0| 66 28 05 00 7c 28 05 00 | 9c 28 05 00 b8 28 05 00 |f(..|(..|.(...(..|
|00000900| d0 28 05 00 e8 28 05 00 | 00 00 00 00 f6 28 05 00 |.(...(..|.....(..|
|00000910| 12 29 05 00 2c 29 05 00 | 44 29 05 00 60 29 05 00 |.)..,)..|D)..`)..|
|00000920| 00 00 00 00 76 29 05 00 | 8a 29 05 00 00 00 00 00 |....v)..|.)......|
|00000930| 4f 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |O.KfRele|aseSpinL|
|00000940| 6f 63 6b 00 4c 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.L.Kf|AcquireS|
|00000950| 70 69 6e 4c 6f 63 6b 00 | 4d 00 4b 66 4c 6f 77 65 |pinLock.|M.KfLowe|
|00000960| 72 49 72 71 6c 00 4e 00 | 4b 66 52 61 69 73 65 49 |rIrql.N.|KfRaiseI|
|00000970| 72 71 6c 00 40 00 4b 65 | 47 65 74 43 75 72 72 65 |rql.@.Ke|GetCurre|
|00000980| 6e 74 49 72 71 6c 00 00 | 19 00 51 75 65 72 79 43 |ntIrql..|..QueryC|
|00000990| 6f 6e 74 65 78 74 41 74 | 74 72 69 62 75 74 65 73 |ontextAt|tributes|
|000009a0| 57 00 0a 00 46 72 65 65 | 43 6f 6e 74 65 78 74 42 |W...Free|ContextB|
|000009b0| 75 66 66 65 72 00 18 00 | 4d 61 70 53 65 63 75 72 |uffer...|MapSecur|
|000009c0| 69 74 79 45 72 72 6f 72 | 00 00 0f 00 49 6d 70 65 |ityError|....Impe|
|000009d0| 72 73 6f 6e 61 74 65 53 | 65 63 75 72 69 74 79 43 |rsonateS|ecurityC|
|000009e0| 6f 6e 74 65 78 74 00 00 | 05 00 44 65 6c 65 74 65 |ontext..|..Delete|
|000009f0| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
|00000a00| 01 00 41 63 71 75 69 72 | 65 43 72 65 64 65 6e 74 |..Acquir|eCredent|
|00000a10| 69 61 6c 73 48 61 6e 64 | 6c 65 57 00 02 00 41 64 |ialsHand|leW...Ad|
|00000a20| 64 43 72 65 64 65 6e 74 | 69 61 6c 73 57 00 00 00 |dCredent|ialsW...|
|00000a30| 41 63 63 65 70 74 53 65 | 63 75 72 69 74 79 43 6f |AcceptSe|curityCo|
|00000a40| 6e 74 65 78 74 00 11 00 | 49 6e 69 74 53 65 63 75 |ntext...|InitSecu|
|00000a50| 72 69 74 79 49 6e 74 65 | 72 66 61 63 65 57 00 00 |rityInte|rfaceW..|
|00000a60| 14 00 4b 53 65 63 56 61 | 6c 69 64 61 74 65 42 75 |..KSecVa|lidateBu|
|00000a70| 66 66 65 72 00 00 30 03 | 4f 62 66 44 65 72 65 66 |ffer..0.|ObfDeref|
|00000a80| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 7b 00 |erenceOb|ject..{.|
|00000a90| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00000aa0| 65 4c 69 74 65 00 37 00 | 45 78 41 63 71 75 69 72 |eLite.7.|ExAcquir|
|00000ab0| 65 52 65 73 6f 75 72 63 | 65 45 78 63 6c 75 73 69 |eResourc|eExclusi|
|00000ac0| 76 65 4c 69 74 65 00 00 | 91 00 45 78 66 49 6e 74 |veLite..|..ExfInt|
|00000ad0| 65 72 6c 6f 63 6b 65 64 | 52 65 6d 6f 76 65 48 65 |erlocked|RemoveHe|
|00000ae0| 61 64 4c 69 73 74 00 00 | bd 03 52 74 6c 43 6f 6d |adList..|..RtlCom|
|00000af0| 70 61 72 65 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |pareUnic|odeStrin|
|00000b00| 67 00 a1 04 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |g...RtlU|pcaseUni|
|00000b10| 63 6f 64 65 43 68 61 72 | 00 00 66 02 4b 65 54 69 |codeChar|..f.KeTi|
|00000b20| 63 6b 43 6f 75 6e 74 00 | ec 03 52 74 6c 45 71 75 |ckCount.|..RtlEqu|
|00000b30| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000b40| 38 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |8.ExAcqu|ireResou|
|00000b50| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 6f 02 |rceShare|dLite.o.|
|00000b60| 4b 65 66 52 65 6c 65 61 | 73 65 53 70 69 6e 4c 6f |KefRelea|seSpinLo|
|00000b70| 63 6b 46 72 6f 6d 44 70 | 63 4c 65 76 65 6c 00 00 |ckFromDp|cLevel..|
|00000b80| 6e 02 4b 65 66 41 63 71 | 75 69 72 65 53 70 69 6e |n.KefAcq|uireSpin|
|00000b90| 4c 6f 63 6b 41 74 44 70 | 63 4c 65 76 65 6c 00 00 |LockAtDp|cLevel..|
|00000ba0| 9a 04 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|00000bb0| 6e 67 54 6f 4f 65 6d 53 | 74 72 69 6e 67 00 b8 04 |ngToOemS|tring...|
|00000bc0| 52 74 6c 78 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |RtlxUnic|odeStrin|
|00000bd0| 67 54 6f 4f 65 6d 53 69 | 7a 65 00 00 62 04 52 74 |gToOemSi|ze..b.Rt|
|00000be0| 6c 4f 65 6d 53 74 72 69 | 6e 67 54 6f 55 6e 69 63 |lOemStri|ngToUnic|
|00000bf0| 6f 64 65 53 74 72 69 6e | 67 00 b6 04 52 74 6c 78 |odeStrin|g...Rtlx|
|00000c00| 4f 65 6d 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |OemStrin|gToUnico|
|00000c10| 64 65 53 69 7a 65 00 00 | d8 02 4e 6c 73 4d 62 4f |deSize..|..NlsMbO|
|00000c20| 65 6d 43 6f 64 65 50 61 | 67 65 54 61 67 00 56 02 |emCodePa|geTag.V.|
|00000c30| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 1b 01 49 6e |KeSetEve|nt....In|
|00000c40| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000c50| 72 79 53 4c 69 73 74 00 | 61 01 49 6f 46 72 65 65 |rySList.|a.IoFree|
|00000c60| 49 72 70 00 34 01 49 6f | 43 68 65 63 6b 44 65 73 |Irp.4.Io|CheckDes|
|00000c70| 69 72 65 64 41 63 63 65 | 73 73 00 00 c7 03 52 74 |iredAcce|ss....Rt|
|00000c80| 6c 43 6f 70 79 55 6e 69 | 63 6f 64 65 53 74 72 69 |lCopyUni|codeStri|
|00000c90| 6e 67 00 00 33 02 4b 65 | 51 75 65 72 79 53 79 73 |ng..3.Ke|QuerySys|
|00000ca0| 74 65 6d 54 69 6d 65 00 | 67 02 4b 65 55 6e 73 74 |temTime.|g.KeUnst|
|00000cb0| 61 63 6b 44 65 74 61 63 | 68 50 72 6f 63 65 73 73 |ackDetac|hProcess|
|00000cc0| 00 00 63 02 4b 65 53 74 | 61 63 6b 41 74 74 61 63 |..c.KeSt|ackAttac|
|00000cd0| 68 50 72 6f 63 65 73 73 | 00 00 69 01 49 6f 47 65 |hProcess|..i.IoGe|
|00000ce0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00000cf0| 0b 05 5a 77 43 6c 6f 73 | 65 00 51 05 5a 77 51 75 |..ZwClos|e.Q.ZwQu|
|00000d00| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 31 05 5a 77 |eryValue|Key.1.Zw|
|00000d10| 4f 70 65 6e 4b 65 79 00 | 98 05 5f 77 63 73 6e 69 |OpenKey.|.._wcsni|
|00000d20| 63 6d 70 00 2f 05 5a 77 | 4f 70 65 6e 46 69 6c 65 |cmp./.Zw|OpenFile|
|00000d30| 00 00 fd 02 4e 74 51 75 | 65 72 79 49 6e 66 6f 72 |....NtQu|eryInfor|
|00000d40| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 4b 04 52 74 |mationFi|le..K.Rt|
|00000d50| 6c 4c 65 6e 67 74 68 53 | 65 63 75 72 69 74 79 44 |lLengthS|ecurityD|
|00000d60| 65 73 63 72 69 70 74 6f | 72 00 04 03 4e 74 51 75 |escripto|r...NtQu|
|00000d70| 65 72 79 56 6f 6c 75 6d | 65 49 6e 66 6f 72 6d 61 |eryVolum|eInforma|
|00000d80| 74 69 6f 6e 46 69 6c 65 | 00 00 1f 02 4b 65 49 6e |tionFile|....KeIn|
|00000d90| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 00 18 02 |itialize|Timer...|
|00000da0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|00000db0| 74 00 6d 02 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |t.m.KeWa|itForSin|
|00000dc0| 67 6c 65 4f 62 6a 65 63 | 74 00 37 02 4b 65 52 65 |gleObjec|t.7.KeRe|
|00000dd0| 61 64 53 74 61 74 65 45 | 76 65 6e 74 00 00 f7 01 |adStateE|vent....|
|00000de0| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 61 02 |KeCancel|Timer.a.|
|00000df0| 4b 65 53 65 74 54 69 6d | 65 72 00 00 f9 01 4b 65 |KeSetTim|er....Ke|
|00000e00| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 5e 02 4b 65 |ClearEve|nt..^.Ke|
|00000e10| 53 65 74 54 61 72 67 65 | 74 50 72 6f 63 65 73 73 |SetTarge|tProcess|
|00000e20| 6f 72 44 70 63 00 17 02 | 4b 65 49 6e 69 74 69 61 |orDpc...|KeInitia|
|00000e30| 6c 69 7a 65 44 70 63 00 | 92 02 4d 6d 42 75 69 6c |lizeDpc.|..MmBuil|
|00000e40| 64 4d 64 6c 46 6f 72 4e | 6f 6e 50 61 67 65 64 50 |dMdlForN|onPagedP|
|00000e50| 6f 6f 6c 00 7d 01 49 6f | 49 6e 69 74 69 61 6c 69 |ool.}.Io|Initiali|
|00000e60| 7a 65 49 72 70 00 24 02 | 4b 65 49 6e 73 65 72 74 |zeIrp.$.|KeInsert|
|00000e70| 51 75 65 75 65 00 15 03 | 4e 74 57 72 69 74 65 46 |Queue...|NtWriteF|
|00000e80| 69 6c 65 00 05 03 4e 74 | 52 65 61 64 46 69 6c 65 |ile...Nt|ReadFile|
|00000e90| 00 00 0a 03 4e 74 53 65 | 74 49 6e 66 6f 72 6d 61 |....NtSe|tInforma|
|00000ea0| 74 69 6f 6e 46 69 6c 65 | 00 00 76 01 49 6f 47 65 |tionFile|..v.IoGe|
|00000eb0| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000ec0| 6a 65 63 74 00 00 28 03 | 4f 62 52 65 66 65 72 65 |ject..(.|ObRefere|
|00000ed0| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000ee0| 65 00 41 01 49 6f 43 72 | 65 61 74 65 46 69 6c 65 |e.A.IoCr|eateFile|
|00000ef0| 00 00 a8 05 6d 65 6d 6d | 6f 76 65 00 a9 04 52 74 |....memm|ove...Rt|
|00000f00| 6c 55 70 70 65 72 43 68 | 61 72 00 00 dd 01 49 6f |lUpperCh|ar....Io|
|00000f10| 57 72 69 74 65 45 72 72 | 6f 72 4c 6f 67 45 6e 74 |WriteErr|orLogEnt|
|00000f20| 72 79 00 00 23 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ry..#.Io|Allocate|
|00000f30| 45 72 72 6f 72 4c 6f 67 | 45 6e 74 72 79 00 2c 04 |ErrorLog|Entry.,.|
|00000f40| 52 74 6c 49 6e 74 65 67 | 65 72 54 6f 55 6e 69 63 |RtlInteg|erToUnic|
|00000f50| 6f 64 65 53 74 72 69 6e | 67 00 4f 01 49 6f 44 65 |odeStrin|g.O.IoDe|
|00000f60| 6c 65 74 65 44 65 76 69 | 63 65 00 00 70 00 45 78 |leteDevi|ce..p.Ex|
|00000f70| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 31 03 |QueueWor|kItem.1.|
|00000f80| 4f 62 66 52 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |ObfRefer|enceObje|
|00000f90| 63 74 00 00 29 02 4b 65 | 4c 65 61 76 65 43 72 69 |ct..).Ke|LeaveCri|
|00000fa0| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 01 02 4b 65 |ticalReg|ion...Ke|
|00000fb0| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00000fc0| 69 6f 6e 00 23 02 4b 65 | 49 6e 73 65 72 74 48 65 |ion.#.Ke|InsertHe|
|00000fd0| 61 64 51 75 65 75 65 00 | e2 01 49 6f 66 43 61 6c |adQueue.|..IofCal|
|00000fe0| 6c 44 72 69 76 65 72 00 | 3e 01 49 6f 43 72 65 61 |lDriver.|>.IoCrea|
|00000ff0| 74 65 44 65 76 69 63 65 | 00 00 f9 04 57 6d 69 47 |teDevice|....WmiG|
|00001000| 65 74 43 6c 6f 63 6b 00 | dc 01 49 6f 57 4d 49 57 |etClock.|..IoWMIW|
|00001010| 72 69 74 65 45 76 65 6e | 74 00 e3 01 49 6f 66 43 |riteEven|t...IofC|
|00001020| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00001030| 91 01 49 6f 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |..IoQueu|eWorkIte|
|00001040| 6d 00 26 01 49 6f 41 6c | 6c 6f 63 61 74 65 57 6f |m.&.IoAl|locateWo|
|00001050| 72 6b 49 74 65 6d 00 00 | 3a 02 4b 65 52 65 61 64 |rkItem..|:.KeRead|
|00001060| 53 74 61 74 65 51 75 65 | 75 65 00 00 42 00 45 78 |StateQue|ue..B.Ex|
|00001070| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00001080| 54 61 67 50 72 69 6f 72 | 69 74 79 00 44 03 50 72 |TagPrior|ity.D.Pr|
|00001090| 6f 62 65 46 6f 72 52 65 | 61 64 00 00 d7 01 49 6f |obeForRe|ad....Io|
|000010a0| 57 4d 49 52 65 67 69 73 | 74 72 61 74 69 6f 6e 43 |WMIRegis|trationC|
|000010b0| 6f 6e 74 72 6f 6c 00 00 | 35 02 4b 65 51 75 65 72 |ontrol..|5.KeQuer|
|000010c0| 79 54 69 6d 65 49 6e 63 | 72 65 6d 65 6e 74 00 00 |yTimeInc|rement..|
|000010d0| 85 05 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |.._excep|t_handle|
|000010e0| 72 33 00 00 7b 05 5f 61 | 6c 6c 6d 75 6c 00 e2 04 |r3..{._a|llmul...|
|000010f0| 53 65 53 69 6e 67 6c 65 | 50 72 69 76 69 6c 65 67 |SeSingle|Privileg|
|00001100| 65 43 68 65 63 6b 00 00 | cc 04 53 65 45 78 70 6f |eCheck..|..SeExpo|
|00001110| 72 74 73 00 62 01 49 6f | 46 72 65 65 4d 64 6c 00 |rts.b.Io|FreeMdl.|
|00001120| 2f 01 49 6f 42 75 69 6c | 64 50 61 72 74 69 61 6c |/.IoBuil|dPartial|
|00001130| 4d 64 6c 00 cb 02 4d 6d | 55 6e 6c 6f 63 6b 50 61 |Mdl...Mm|UnlockPa|
|00001140| 67 65 73 00 cd 02 4d 6d | 55 6e 6d 61 70 4c 6f 63 |ges...Mm|UnmapLoc|
|00001150| 6b 65 64 50 61 67 65 73 | 00 00 03 04 52 74 6c 46 |kedPages|....RtlF|
|00001160| 72 65 65 4f 65 6d 53 74 | 72 69 6e 67 00 00 e1 02 |reeOemSt|ring....|
|00001170| 4e 74 43 6c 6f 73 65 00 | 69 05 5a 77 53 65 74 56 |NtClose.|i.ZwSetV|
|00001180| 61 6c 75 65 4b 65 79 00 | 96 05 5f 77 63 73 69 63 |alueKey.|.._wcsic|
|00001190| 6d 70 00 00 43 03 50 6f | 55 6e 72 65 67 69 73 74 |mp..C.Po|Unregist|
|000011a0| 65 72 53 79 73 74 65 6d | 53 74 61 74 65 00 ca 02 |erSystem|State...|
|000011b0| 4d 6d 55 6e 6c 6f 63 6b | 50 61 67 61 62 6c 65 49 |MmUnlock|PagableI|
|000011c0| 6d 61 67 65 53 65 63 74 | 69 6f 6e 00 13 04 52 74 |mageSect|ion...Rt|
|000011d0| 6c 47 65 74 4f 77 6e 65 | 72 53 65 63 75 72 69 74 |lGetOwne|rSecurit|
|000011e0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 0b 04 52 74 |yDescrip|tor...Rt|
|000011f0| 6c 47 65 74 44 61 63 6c | 53 65 63 75 72 69 74 79 |lGetDacl|Security|
|00001200| 44 65 73 63 72 69 70 74 | 6f 72 00 00 4f 02 4b 65 |Descript|or..O.Ke|
|00001210| 52 75 6e 64 6f 77 6e 51 | 75 65 75 65 00 00 fc 01 |RundownQ|ueue....|
|00001220| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00001230| 54 68 72 65 61 64 00 00 | 3b 03 50 6f 52 65 67 69 |Thread..|;.PoRegi|
|00001240| 73 74 65 72 53 79 73 74 | 65 6d 53 74 61 74 65 00 |sterSyst|emState.|
|00001250| 7b 04 52 74 6c 53 65 74 | 4f 77 6e 65 72 53 65 63 |{.RtlSet|OwnerSec|
|00001260| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001270| 79 04 52 74 6c 53 65 74 | 44 61 63 6c 53 65 63 75 |y.RtlSet|DaclSecu|
|00001280| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 00 |rityDesc|riptor..|
|00001290| a1 03 52 74 6c 41 64 64 | 41 63 63 65 73 73 41 6c |..RtlAdd|AccessAl|
|000012a0| 6c 6f 77 65 64 41 63 65 | 00 00 c8 03 52 74 6c 43 |lowedAce|....RtlC|
|000012b0| 72 65 61 74 65 41 63 6c | 00 00 4c 04 52 74 6c 4c |reateAcl|..L.RtlL|
|000012c0| 65 6e 67 74 68 53 69 64 | 00 00 82 04 52 74 6c 53 |engthSid|....RtlS|
|000012d0| 75 62 41 75 74 68 6f 72 | 69 74 79 53 69 64 00 00 |ubAuthor|itySid..|
|000012e0| 1e 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |..KeInit|ializeSp|
|000012f0| 69 6e 4c 6f 63 6b 00 00 | 4a 04 52 74 6c 4c 65 6e |inLock..|J.RtlLen|
|00001300| 67 74 68 52 65 71 75 69 | 72 65 64 53 69 64 00 00 |gthRequi|redSid..|
|00001310| cc 03 52 74 6c 43 72 65 | 61 74 65 53 65 63 75 72 |..RtlCre|ateSecur|
|00001320| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 1c 02 |ityDescr|iptor...|
|00001330| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 51 75 65 75 |KeInitia|lizeQueu|
|00001340| 65 00 63 01 49 6f 46 72 | 65 65 57 6f 72 6b 49 74 |e.c.IoFr|eeWorkIt|
|00001350| 65 6d 00 00 2d 00 44 62 | 67 42 72 65 61 6b 50 6f |em..-.Db|gBreakPo|
|00001360| 69 6e 74 00 8a 04 52 74 | 6c 54 69 6d 65 54 6f 54 |int...Rt|lTimeToT|
|00001370| 69 6d 65 46 69 65 6c 64 | 73 00 83 00 45 78 53 79 |imeField|s...ExSy|
|00001380| 73 74 65 6d 54 69 6d 65 | 54 6f 4c 6f 63 61 6c 54 |stemTime|ToLocalT|
|00001390| 69 6d 65 00 86 04 52 74 | 6c 54 69 6d 65 46 69 65 |ime...Rt|lTimeFie|
|000013a0| 6c 64 73 54 6f 54 69 6d | 65 00 79 05 5f 61 6c 6c |ldsToTim|e.y._all|
|000013b0| 64 69 76 00 f6 01 4b 65 | 42 75 67 43 68 65 63 6b |div...Ke|BugCheck|
|000013c0| 45 78 00 00 88 04 52 74 | 6c 54 69 6d 65 54 6f 53 |Ex....Rt|lTimeToS|
|000013d0| 65 63 6f 6e 64 73 53 69 | 6e 63 65 31 39 37 30 00 |econdsSi|nce1970.|
|000013e0| b2 00 46 73 52 74 6c 44 | 6f 65 73 4e 61 6d 65 43 |..FsRtlD|oesNameC|
|000013f0| 6f 6e 74 61 69 6e 57 69 | 6c 64 43 61 72 64 73 00 |ontainWi|ldCards.|
|00001400| 07 02 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00001410| 72 65 61 64 00 00 24 01 | 49 6f 41 6c 6c 6f 63 61 |read..$.|IoAlloca|
|00001420| 74 65 49 72 70 00 90 01 | 49 6f 51 75 65 75 65 54 |teIrp...|IoQueueT|
|00001430| 68 72 65 61 64 49 72 70 | 00 00 bc 02 4d 6d 50 72 |hreadIrp|....MmPr|
|00001440| 6f 62 65 41 6e 64 4c 6f | 63 6b 50 61 67 65 73 00 |obeAndLo|ckPages.|
|00001450| 25 01 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |%.IoAllo|cateMdl.|
|00001460| ab 02 4d 6d 4c 6f 63 6b | 50 61 67 61 62 6c 65 44 |..MmLock|PagableD|
|00001470| 61 74 61 53 65 63 74 69 | 6f 6e 00 00 eb 03 52 74 |ataSecti|on....Rt|
|00001480| 6c 45 71 75 61 6c 53 74 | 72 69 6e 67 00 00 e4 02 |lEqualSt|ring....|
|00001490| 4e 74 43 72 65 61 74 65 | 46 69 6c 65 00 00 e8 02 |NtCreate|File....|
|000014a0| 4e 74 44 65 76 69 63 65 | 49 6f 43 6f 6e 74 72 6f |NtDevice|IoContro|
|000014b0| 6c 46 69 6c 65 00 1a 05 | 5a 77 44 65 76 69 63 65 |lFile...|ZwDevice|
|000014c0| 49 6f 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 10 05 |IoContro|lFile...|
|000014d0| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 35 04 |ZwCreate|File..5.|
|000014e0| 52 74 6c 49 70 76 34 53 | 74 72 69 6e 67 54 6f 41 |RtlIpv4S|tringToA|
|000014f0| 64 64 72 65 73 73 57 00 | 30 04 52 74 6c 49 70 76 |ddressW.|0.RtlIpv|
|00001500| 34 41 64 64 72 65 73 73 | 54 6f 53 74 72 69 6e 67 |4Address|ToString|
|00001510| 45 78 57 00 36 01 49 6f | 43 68 65 63 6b 46 75 6e |ExW.6.Io|CheckFun|
|00001520| 63 74 69 6f 6e 41 63 63 | 65 73 73 00 dd 00 46 73 |ctionAcc|ess...Fs|
|00001530| 52 74 6c 4d 64 6c 57 72 | 69 74 65 43 6f 6d 70 6c |RtlMdlWr|iteCompl|
|00001540| 65 74 65 44 65 76 00 00 | f0 00 46 73 52 74 6c 50 |eteDev..|..FsRtlP|
|00001550| 72 65 70 61 72 65 4d 64 | 6c 57 72 69 74 65 44 65 |repareMd|lWriteDe|
|00001560| 76 00 da 00 46 73 52 74 | 6c 4d 64 6c 52 65 61 64 |v...FsRt|lMdlRead|
|00001570| 43 6f 6d 70 6c 65 74 65 | 44 65 76 00 db 00 46 73 |Complete|Dev...Fs|
|00001580| 52 74 6c 4d 64 6c 52 65 | 61 64 44 65 76 00 66 01 |RtlMdlRe|adDev.f.|
|00001590| 49 6f 47 65 74 42 61 73 | 65 46 69 6c 65 53 79 73 |IoGetBas|eFileSys|
|000015a0| 74 65 6d 44 65 76 69 63 | 65 4f 62 6a 65 63 74 00 |temDevic|eObject.|
|000015b0| 35 01 49 6f 43 68 65 63 | 6b 45 61 42 75 66 66 65 |5.IoChec|kEaBuffe|
|000015c0| 72 56 61 6c 69 64 69 74 | 79 00 67 04 52 74 6c 50 |rValidit|y.g.RtlP|
|000015d0| 72 65 66 69 78 55 6e 69 | 63 6f 64 65 53 74 72 69 |refixUni|codeStri|
|000015e0| 6e 67 00 00 07 03 4e 74 | 52 65 71 75 65 73 74 57 |ng....Nt|RequestW|
|000015f0| 61 69 74 52 65 70 6c 79 | 50 6f 72 74 00 00 5b 04 |aitReply|Port..[.|
|00001600| 52 74 6c 4e 74 53 74 61 | 74 75 73 54 6f 44 6f 73 |RtlNtSta|tusToDos|
|00001610| 45 72 72 6f 72 4e 6f 54 | 65 62 00 00 33 01 49 6f |ErrorNoT|eb..3.Io|
|00001620| 43 61 6e 63 65 6c 49 72 | 70 00 1c 04 52 74 6c 49 |CancelIr|p...RtlI|
|00001630| 6e 69 74 53 74 72 69 6e | 67 00 e1 01 49 6f 57 72 |nitStrin|g...IoWr|
|00001640| 69 74 65 54 72 61 6e 73 | 66 65 72 43 6f 75 6e 74 |iteTrans|ferCount|
|00001650| 00 00 de 01 49 6f 57 72 | 69 74 65 4f 70 65 72 61 |....IoWr|iteOpera|
|00001660| 74 69 6f 6e 43 6f 75 6e | 74 00 98 01 49 6f 52 65 |tionCoun|t...IoRe|
|00001670| 61 64 54 72 61 6e 73 66 | 65 72 43 6f 75 6e 74 00 |adTransf|erCount.|
|00001680| 95 01 49 6f 52 65 61 64 | 4f 70 65 72 61 74 69 6f |..IoRead|Operatio|
|00001690| 6e 43 6f 75 6e 74 00 00 | c0 01 49 6f 53 74 61 74 |nCount..|..IoStat|
|000016a0| 69 73 74 69 63 73 4c 6f | 63 6b 00 00 c4 05 77 63 |isticsLo|ck....wc|
|000016b0| 73 63 70 79 00 00 29 04 | 52 74 6c 49 6e 74 36 34 |scpy..).|RtlInt64|
|000016c0| 54 6f 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |ToUnicod|eString.|
|000016d0| f3 02 4e 74 4f 70 65 6e | 46 69 6c 65 00 00 ba 01 |..NtOpen|File....|
|000016e0| 49 6f 53 65 74 54 68 72 | 65 61 64 48 61 72 64 45 |IoSetThr|eadHardE|
|000016f0| 72 72 6f 72 4d 6f 64 65 | 00 00 c2 05 77 63 73 63 |rrorMode|....wcsc|
|00001700| 68 72 00 00 8d 05 5f 73 | 74 72 69 63 6d 70 00 00 |hr...._s|tricmp..|
|00001710| 5b 01 49 6f 46 61 73 74 | 51 75 65 72 79 4e 65 74 |[.IoFast|QueryNet|
|00001720| 77 6f 72 6b 41 74 74 72 | 69 62 75 74 65 73 00 00 |workAttr|ibutes..|
|00001730| 72 04 52 74 6c 53 65 63 | 6f 6e 64 73 53 69 6e 63 |r.RtlSec|ondsSinc|
|00001740| 65 31 39 37 30 54 6f 54 | 69 6d 65 00 37 01 49 6f |e1970ToT|ime.7.Io|
|00001750| 43 68 65 63 6b 51 75 65 | 72 79 53 65 74 46 69 6c |CheckQue|rySetFil|
|00001760| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 a5 04 |eInforma|tion....|
|00001770| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|00001780| 53 74 72 69 6e 67 54 6f | 4f 65 6d 53 74 72 69 6e |StringTo|OemStrin|
|00001790| 67 00 01 04 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |g...RtlF|reeAnsiS|
|000017a0| 74 72 69 6e 67 00 38 01 | 49 6f 43 68 65 63 6b 51 |tring.8.|IoCheckQ|
|000017b0| 75 65 72 79 53 65 74 56 | 6f 6c 75 6d 65 49 6e 66 |uerySetV|olumeInf|
|000017c0| 6f 72 6d 61 74 69 6f 6e | 00 00 0f 03 4e 74 53 65 |ormation|....NtSe|
|000017d0| 74 56 6f 6c 75 6d 65 49 | 6e 66 6f 72 6d 61 74 69 |tVolumeI|nformati|
|000017e0| 6f 6e 46 69 6c 65 00 00 | 7f 05 5f 61 6c 6c 73 68 |onFile..|.._allsh|
|000017f0| 72 00 0e 03 4e 74 53 65 | 74 53 65 63 75 72 69 74 |r...NtSe|tSecurit|
|00001800| 79 4f 62 6a 65 63 74 00 | ac 04 52 74 6c 56 61 6c |yObject.|..RtlVal|
|00001810| 69 64 52 65 6c 61 74 69 | 76 65 53 65 63 75 72 69 |idRelati|veSecuri|
|00001820| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 02 03 |tyDescri|ptor....|
|00001830| 4e 74 51 75 65 72 79 53 | 65 63 75 72 69 74 79 4f |NtQueryS|ecurityO|
|00001840| 62 6a 65 63 74 00 01 03 | 4e 74 51 75 65 72 79 51 |bject...|NtQueryQ|
|00001850| 75 6f 74 61 49 6e 66 6f | 72 6d 61 74 69 6f 6e 46 |uotaInfo|rmationF|
|00001860| 69 6c 65 00 0d 03 4e 74 | 53 65 74 51 75 6f 74 61 |ile...Nt|SetQuota|
|00001870| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 46 69 6c 65 00 |Informat|ionFile.|
|00001880| 7a 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |z.IoGetS|tackLimi|
|00001890| 74 73 00 00 c7 02 4d 6d | 53 69 7a 65 4f 66 4d 64 |ts....Mm|SizeOfMd|
|000018a0| 6c 00 c3 05 77 63 73 63 | 6d 70 00 00 1a 04 52 74 |l...wcsc|mp....Rt|
|000018b0| 6c 49 6e 69 74 41 6e 73 | 69 53 74 72 69 6e 67 00 |lInitAns|iString.|
|000018c0| ca 00 46 73 52 74 6c 49 | 73 46 61 74 44 62 63 73 |..FsRtlI|sFatDbcs|
|000018d0| 4c 65 67 61 6c 00 40 04 | 52 74 6c 49 73 4e 61 6d |Legal.@.|RtlIsNam|
|000018e0| 65 4c 65 67 61 6c 44 4f | 53 38 44 6f 74 33 00 00 |eLegalDO|S8Dot3..|
|000018f0| da 02 4e 6c 73 4f 65 6d | 4c 65 61 64 42 79 74 65 |..NlsOem|LeadByte|
|00001900| 49 6e 66 6f 00 00 9e 04 | 52 74 6c 55 6e 69 63 6f |Info....|RtlUnico|
|00001910| 64 65 54 6f 4f 65 6d 4e | 00 00 a8 04 52 74 6c 55 |deToOemN|....RtlU|
|00001920| 70 63 61 73 65 55 6e 69 | 63 6f 64 65 54 6f 4f 65 |pcaseUni|codeToOe|
|00001930| 6d 4e 00 00 ff 01 4b 65 | 44 65 74 61 63 68 50 72 |mN....Ke|DetachPr|
|00001940| 6f 63 65 73 73 00 f4 01 | 4b 65 41 74 74 61 63 68 |ocess...|KeAttach|
|00001950| 50 72 6f 63 65 73 73 00 | 46 03 50 73 41 73 73 69 |Process.|F.PsAssi|
|00001960| 67 6e 49 6d 70 65 72 73 | 6f 6e 61 74 69 6f 6e 54 |gnImpers|onationT|
|00001970| 6f 6b 65 6e 00 00 ce 04 | 53 65 46 72 65 65 50 72 |oken....|SeFreePr|
|00001980| 69 76 69 6c 65 67 65 73 | 00 00 53 04 52 74 6c 4d |ivileges|..S.RtlM|
|00001990| 61 70 47 65 6e 65 72 69 | 63 4d 61 73 6b 00 b1 01 |apGeneri|cMask...|
|000019a0| 49 6f 53 65 74 46 69 6c | 65 4f 72 69 67 69 6e 00 |IoSetFil|eOrigin.|
|000019b0| 09 02 4b 65 47 65 74 52 | 65 63 6f 6d 6d 65 6e 64 |..KeGetR|ecommend|
|000019c0| 65 64 53 68 61 72 65 64 | 44 61 74 61 41 6c 69 67 |edShared|DataAlig|
|000019d0| 6e 6d 65 6e 74 00 2b 02 | 4b 65 4e 75 6d 62 65 72 |nment.+.|KeNumber|
|000019e0| 50 72 6f 63 65 73 73 6f | 72 73 00 00 8c 05 5f 73 |Processo|rs...._s|
|000019f0| 6e 77 70 72 69 6e 74 66 | 00 00 bb 05 74 6f 75 70 |nwprintf|....toup|
|00001a00| 70 65 72 00 89 04 52 74 | 6c 54 69 6d 65 54 6f 53 |per...Rt|lTimeToS|
|00001a10| 65 63 6f 6e 64 73 53 69 | 6e 63 65 31 39 38 30 00 |econdsSi|nce1980.|
|00001a20| ad 04 52 74 6c 56 61 6c | 69 64 53 65 63 75 72 69 |..RtlVal|idSecuri|
|00001a30| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 af 04 |tyDescri|ptor....|
|00001a40| 52 74 6c 56 65 72 69 66 | 79 56 65 72 73 69 6f 6e |RtlVerif|yVersion|
|00001a50| 49 6e 66 6f 00 00 ed 04 | 56 65 72 53 65 74 43 6f |Info....|VerSetCo|
|00001a60| 6e 64 69 74 69 6f 6e 4d | 61 73 6b 00 a9 02 4d 6d |nditionM|ask...Mm|
|00001a70| 49 73 54 68 69 73 41 6e | 4e 74 41 73 53 79 73 74 |IsThisAn|NtAsSyst|
|00001a80| 65 6d 00 00 4c 03 50 73 | 43 72 65 61 74 65 53 79 |em..L.Ps|CreateSy|
|00001a90| 73 74 65 6d 54 68 72 65 | 61 64 00 00 58 02 4b 65 |stemThre|ad..X.Ke|
|00001aa0| 53 65 74 49 64 65 61 6c | 50 72 6f 63 65 73 73 6f |SetIdeal|Processo|
|00001ab0| 72 54 68 72 65 61 64 00 | 0c 03 4e 74 53 65 74 49 |rThread.|..NtSetI|
|00001ac0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 68 72 65 61 64 |nformati|onThread|
|00001ad0| 00 00 98 03 50 73 54 65 | 72 6d 69 6e 61 74 65 53 |....PsTe|rminateS|
|00001ae0| 79 73 74 65 6d 54 68 72 | 65 61 64 00 49 02 4b 65 |ystemThr|ead.I.Ke|
|00001af0| 52 65 6d 6f 76 65 51 75 | 65 75 65 00 de 03 52 74 |RemoveQu|eue...Rt|
|00001b00| 6c 44 65 73 74 72 6f 79 | 48 65 61 70 00 00 a6 03 |lDestroy|Heap....|
|00001b10| 52 74 6c 41 6c 6c 6f 63 | 61 74 65 48 65 61 70 00 |RtlAlloc|ateHeap.|
|00001b20| 02 04 52 74 6c 46 72 65 | 65 48 65 61 70 00 ca 03 |..RtlFre|eHeap...|
|00001b30| 52 74 6c 43 72 65 61 74 | 65 48 65 61 70 00 e2 02 |RtlCreat|eHeap...|
|00001b40| 4e 74 43 6f 6e 6e 65 63 | 74 50 6f 72 74 00 e5 02 |NtConnec|tPort...|
|00001b50| 4e 74 43 72 65 61 74 65 | 53 65 63 74 69 6f 6e 00 |NtCreate|Section.|
|00001b60| 57 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 52 65 |W.ExInit|ializeRe|
|00001b70| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 1a 01 49 6e |sourceLi|te....In|
|00001b80| 74 65 72 6c 6f 63 6b 65 | 64 50 6f 70 45 6e 74 72 |terlocke|dPopEntr|
|00001b90| 79 53 4c 69 73 74 00 00 | 47 00 45 78 44 65 6c 65 |ySList..|G.ExDele|
|00001ba0| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|00001bb0| 41 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |A.ExAllo|catePool|
|00001bc0| 57 69 74 68 54 61 67 00 | 30 00 44 62 67 50 72 69 |WithTag.|0.DbgPri|
|00001bd0| 6e 74 00 00 4e 00 45 78 | 46 72 65 65 50 6f 6f 6c |nt..N.Ex|FreePool|
|00001be0| 57 69 74 68 54 61 67 00 | 6d 00 45 78 4c 6f 63 61 |WithTag.|m.ExLoca|
|00001bf0| 6c 54 69 6d 65 54 6f 53 | 79 73 74 65 6d 54 69 6d |lTimeToS|ystemTim|
|00001c00| 65 00 ba 03 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |e...RtlC|ompareMe|
|00001c10| 6d 6f 72 79 00 00 af 02 | 4d 6d 4d 61 70 4c 6f 63 |mory....|MmMapLoc|
|00001c20| 6b 65 64 50 61 67 65 73 | 00 00 b0 02 4d 6d 4d 61 |kedPages|....MmMa|
|00001c30| 70 4c 6f 63 6b 65 64 50 | 61 67 65 73 53 70 65 63 |pLockedP|agesSpec|
|00001c40| 69 66 79 43 61 63 68 65 | 00 00 a9 03 52 74 6c 41 |ifyCache|....RtlA|
|00001c50| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|00001c60| 64 65 53 74 72 69 6e 67 | 00 00 df 02 4e 74 41 6c |deString|....NtAl|
|00001c70| 6c 6f 63 61 74 65 56 69 | 72 74 75 61 6c 4d 65 6d |locateVi|rtualMem|
|00001c80| 6f 72 79 00 ec 02 4e 74 | 46 72 65 65 56 69 72 74 |ory...Nt|FreeVirt|
|00001c90| 75 61 6c 4d 65 6d 6f 72 | 79 00 8b 00 45 78 66 49 |ualMemor|y...ExfI|
|00001ca0| 6e 74 65 72 6c 6f 63 6b | 65 64 41 64 64 55 6c 6f |nterlock|edAddUlo|
|00001cb0| 6e 67 00 00 1d 04 52 74 | 6c 49 6e 69 74 55 6e 69 |ng....Rt|lInitUni|
|00001cc0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 a2 04 52 74 |codeStri|ng....Rt|
|00001cd0| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00001ce0| 72 69 6e 67 00 00 05 04 | 52 74 6c 46 72 65 65 55 |ring....|RtlFreeU|
|00001cf0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 d1 04 |nicodeSt|ring....|
|00001d00| 53 65 4c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |SeLockSu|bjectCon|
|00001d10| 74 65 78 74 00 00 d8 04 | 53 65 51 75 65 72 79 41 |text....|SeQueryA|
|00001d20| 75 74 68 65 6e 74 69 63 | 61 74 69 6f 6e 49 64 54 |uthentic|ationIdT|
|00001d30| 6f 6b 65 6e 00 00 ea 04 | 53 65 55 6e 6c 6f 63 6b |oken....|SeUnlock|
|00001d40| 53 75 62 6a 65 63 74 43 | 6f 6e 74 65 78 74 00 00 |SubjectC|ontext..|
|00001d50| c4 04 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |..SeCapt|ureSubje|
|00001d60| 63 74 43 6f 6e 74 65 78 | 74 00 b9 04 53 65 41 63 |ctContex|t...SeAc|
|00001d70| 63 65 73 73 43 68 65 63 | 6b 00 de 04 53 65 52 65 |cessChec|k...SeRe|
|00001d80| 6c 65 61 73 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |leaseSub|jectCont|
|00001d90| 65 78 74 00 c6 05 77 63 | 73 6c 65 6e 00 00 22 04 |ext...wc|slen..".|
|00001da0| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|00001db0| 00 00 fe 04 57 6d 69 54 | 72 61 63 65 4d 65 73 73 |....WmiT|raceMess|
|00001dc0| 61 67 65 00 5f 05 5a 77 | 53 65 74 45 76 65 6e 74 |age._.Zw|SetEvent|
|00001dd0| 00 00 72 05 5a 77 57 61 | 69 74 46 6f 72 53 69 6e |..r.ZwWa|itForSin|
|00001de0| 67 6c 65 4f 62 6a 65 63 | 74 00 4c 02 4b 65 52 65 |gleObjec|t.L.KeRe|
|00001df0| 73 65 74 45 76 65 6e 74 | 00 00 6b 02 4b 65 57 61 |setEvent|..k.KeWa|
|00001e00| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00001e10| 65 63 74 73 00 00 1d 02 | 4b 65 49 6e 69 74 69 61 |ects....|KeInitia|
|00001e20| 6c 69 7a 65 53 65 6d 61 | 70 68 6f 72 65 00 0f 05 |lizeSema|phore...|
|00001e30| 5a 77 43 72 65 61 74 65 | 45 76 65 6e 74 00 2b 05 |ZwCreate|Event.+.|
|00001e40| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|00001e50| 6f 6e 00 00 13 05 5a 77 | 43 72 65 61 74 65 53 65 |on....Zw|CreateSe|
|00001e60| 63 74 69 6f 6e 00 43 02 | 4b 65 52 65 6c 65 61 73 |ction.C.|KeReleas|
|00001e70| 65 53 65 6d 61 70 68 6f | 72 65 00 00 8e 00 45 78 |eSemapho|re....Ex|
|00001e80| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00001e90| 72 74 54 61 69 6c 4c 69 | 73 74 00 00 50 05 5a 77 |rtTailLi|st..P.Zw|
|00001ea0| 51 75 65 72 79 53 79 73 | 74 65 6d 49 6e 66 6f 72 |QuerySys|temInfor|
|00001eb0| 6d 61 74 69 6f 6e 00 00 | 56 03 50 73 47 65 74 43 |mation..|V.PsGetC|
|00001ec0| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 00 00 |urrentTh|readId..|
|00001ed0| 53 03 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |S.PsGetC|urrentPr|
|00001ee0| 6f 63 65 73 73 49 64 00 | 12 05 5a 77 43 72 65 61 |ocessId.|..ZwCrea|
|00001ef0| 74 65 4b 65 79 00 26 00 | 54 64 69 44 65 72 65 67 |teKey.&.|TdiDereg|
|00001f00| 69 73 74 65 72 50 6e 50 | 48 61 6e 64 6c 65 72 73 |isterPnP|Handlers|
|00001f10| 00 00 34 00 54 64 69 52 | 65 67 69 73 74 65 72 50 |..4.TdiR|egisterP|
|00001f20| 6e 50 48 61 6e 64 6c 65 | 72 73 00 00 2c 00 54 64 |nPHandle|rs..,.Td|
|00001f30| 69 4f 70 65 6e 4e 65 74 | 62 69 6f 73 41 64 64 72 |iOpenNet|biosAddr|
|00001f40| 65 73 73 00 36 00 54 64 | 69 52 65 74 75 72 6e 43 |ess.6.Td|iReturnC|
|00001f50| 68 61 69 6e 65 64 52 65 | 63 65 69 76 65 73 00 00 |hainedRe|ceives..|
|00001f60| 14 00 54 64 69 43 6f 70 | 79 42 75 66 66 65 72 54 |..TdiCop|yBufferT|
|00001f70| 6f 4d 64 6c 00 00 02 00 | 57 6d 69 53 79 73 74 65 |oMdl....|WmiSyste|
|00001f80| 6d 43 6f 6e 74 72 6f 6c | 00 00 00 00 57 6d 69 43 |mControl|....WmiC|
|00001f90| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00001fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
